This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json) Hash identifier: /XNT5u4v1gZBWxj96EiT0n5Ji1wRXzdfXMVfyFf2nMQ= Subject key identifier: 96:F3:5F:DD:62:B8:08:21:29:2B:BA:83:C3:5F:0B:8A:72:31:4C:0E Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d Certificate serial: 019C4390A03796A1BA7C7A1CD7E46D040030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft Manifest number: 0D84 Signing time: Mon 09 Feb 2026 18:01:17 +0000 Manifest this update: Mon 09 Feb 2026 18:01:17 +0000 Manifest next update: Tue 10 Feb 2026 18:01:17 +0000 Files and hashes: 1: xm2EH0bMS7Lp6R8nocX142XHBiE.roa (hash: Sw8xk1+itLI+I+ws0cUgg1V722l6xa6aNkokvCgQUD4=) 2: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: 0J+3PPnjLYdqF0WhK4BlnQO5ejQyngyKWOvDeus04/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a0:37:96:a1:ba:7c:7a:1c:d7:e4:6d:04:00:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d Validity Not Before: Feb 9 18:01:17 2026 GMT Not After : Feb 10 18:01:17 2026 GMT Subject: CN=96f35fdd62b80821292bba83c35f0b8a72314c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:09:8d:f1:72:5b:52:fa:f2:0a:3e:a3:90: 8f:7f:4b:61:ae:c6:c9:74:98:29:8a:13:4a:77:ac: 33:55:f9:60:b1:95:d1:64:c1:9d:56:5e:c5:02:85: 4a:2f:9f:b3:7f:b1:32:65:bd:66:4e:2b:21:08:53: 64:5c:b4:f7:61:df:80:65:31:b6:11:5f:e6:bf:89: 54:a0:4f:ee:20:e1:eb:17:69:97:0a:e0:82:76:0a: ac:c3:c3:2d:b9:31:36:8b:d1:4c:0d:32:39:11:7b: 7b:a0:9c:ca:4e:cf:e9:7c:63:96:84:05:cc:70:26: 96:cb:77:da:df:4d:ed:8e:41:e2:29:50:ff:fa:08: da:f0:4c:97:f1:7b:b6:a2:70:e4:1e:fd:27:bc:eb: 90:fe:a5:ca:9c:8e:15:71:1f:cf:b1:2b:7d:8c:ab: 41:9d:0d:c0:66:20:96:a5:f0:78:b4:ef:46:ca:e3: b6:0a:f3:de:6c:c2:43:e8:47:08:93:9b:1c:2a:64: 38:5a:64:ab:60:f4:d7:39:c0:02:30:a1:e7:5d:22: 44:bf:d3:eb:1f:31:09:83:1c:76:46:49:25:ab:ab: da:9c:23:d6:40:54:7c:7f:0f:24:fb:b7:89:0b:25: 0f:39:c4:f7:d3:80:eb:4c:ed:5e:2e:0b:6f:51:80: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F3:5F:DD:62:B8:08:21:29:2B:BA:83:C3:5F:0B:8A:72:31:4C:0E X509v3 Authority Key Identifier: keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:61:f0:1f:8c:70:46:23:00:e8:b2:53:55:fe:d7:eb:75:22: f0:49:fd:2b:c4:fd:18:cc:2c:89:b7:7e:ac:f2:3b:13:a9:c8: 6f:a5:50:77:66:50:65:17:3b:a1:97:54:04:06:ec:f5:73:0b: 00:1a:ad:05:24:2c:5e:5c:34:0d:7a:2a:1b:3d:dc:be:82:1d: 94:49:70:d5:cc:c8:25:83:95:23:e5:b7:58:43:e1:fe:71:32: d1:6a:bf:86:5e:c6:36:f1:f8:3e:d6:0b:41:17:bb:61:78:45: d4:75:2f:64:3a:87:6a:1e:05:2b:17:06:5b:ca:d5:23:f2:43: 1a:9c:6f:3c:59:27:5b:b2:99:a4:ee:27:ad:e1:9d:61:2d:77: 12:04:b9:26:c4:27:9e:89:11:57:e0:42:e5:82:7b:23:c5:97: b3:e8:da:65:61:7a:31:12:43:d6:0a:d6:37:9f:21:a1:55:1c: 2c:b4:bf:3d:63:da:ac:b2:f2:b5:df:a8:c1:32:8e:0e:49:a0: 48:5a:5a:01:17:33:15:61:97:5d:a8:d6:f1:8e:41:8b:5f:25: 04:bc:00:f9:63:ad:81:96:31:f4:d4:11:b8:64:d3:6b:f5:6e: ca:1e:a1:95:04:d5:45:98:d9:9b:58:f9:f7:9e:64:cf:12:0c: 4f:da:13:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKA3lqG6fHoc1+RtBAAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNTc5OWQ4ZDA1ZjRhMDIwMDExZGNhODAzMTc2MmJlYTAx MjI1NWQwHhcNMjYwMjA5MTgwMTE3WhcNMjYwMjEwMTgwMTE3WjAzMTEwLwYDVQQD Eyg5NmYzNWZkZDYyYjgwODIxMjkyYmJhODNjMzVmMGI4YTcyMzE0YzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy64JjfFyW1L68go+o5CPf0thrsbJ dJgpihNKd6wzVflgsZXRZMGdVl7FAoVKL5+zf7EyZb1mTishCFNkXLT3Yd+AZTG2 EV/mv4lUoE/uIOHrF2mXCuCCdgqsw8MtuTE2i9FMDTI5EXt7oJzKTs/pfGOWhAXM cCaWy3fa303tjkHiKVD/+gja8EyX8Xu2onDkHv0nvOuQ/qXKnI4VcR/PsSt9jKtB nQ3AZiCWpfB4tO9GyuO2CvPebMJD6EcIk5scKmQ4WmSrYPTXOcACMKHnXSJEv9Pr HzEJgxx2Rkklq6vanCPWQFR8fw8k+7eJCyUPOcT304DrTO1eLgtvUYDMkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbzX91iuAghKSu6g8NfC4pyMUwOMB8GA1UdIwQY MBaAFMtXmdjQX0oCABHcqAMXYr6gEiVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTFlWjJOQmZTZ0lBRWR5b0F4ZGl2cUFTSlYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jNzgwMjAtZmEzMi00OTg4LTllMTQt NWM2MDJmZGU5NjNiLzEveTFlWjJOQmZTZ0lBRWR5b0F4ZGl2cUFTSlYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jNzgwMjAtZmEzMi00OTg4LTllMTQtNWM2MDJmZGU5NjNi LzEveTFlWjJOQmZTZ0lBRWR5b0F4ZGl2cUFTSlYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmHwH4xw RiMA6LJTVf7X63Ui8En9K8T9GMwsibd+rPI7E6nIb6VQd2ZQZRc7oZdUBAbs9XML ABqtBSQsXlw0DXoqGz3cvoIdlElw1czIJYOVI+W3WEPh/nEy0Wq/hl7GNvH4PtYL QRe7YXhF1HUvZDqHah4FKxcGW8rVI/JDGpxvPFknW7KZpO4nreGdYS13EgS5JsQn nokRV+BC5YJ7I8WXs+jaZWF6MRJD1grWN58hoVUcLLS/PWParLLytd+owTKODkmg SFpaARczFWGXXajW8Y5Bi18lBLwA+WOtgZYx9NQRuGTTa/Vuyh6hlQTVRZjZm1j5 955kzxIMT9oTIw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:40 2026 by rpki-client